security enabled verified medium v1.0.0

joomscan

Joomla CMS vulnerability scanner that detects component versions, known vulnerabilities, and security misconfigurations.

📋 Live Preview

joomscan -u {target}

🌍 target → url

joomscan -u {target}

Sandbox: execFile · Timeout: 300s

Capabilities

web.discovery.asset

web.fingerprint.cms

web.vulnerability.scanner

web.enumeration.component

Parameters

Name	Type	Required	Default	Description	Aliases
`url`	string	Yes	-	Target Joomla URL (e.g. http://target.com/joomla)	`-u`, `--url`
`threads`	integer	No	10	Number of threads for concurrent scanning	`-t`, `--threads`
`verbose`	boolean	No	-	Enable verbose output	`-v`, `--verbose`
`output`	string	No	-	Save scan report to file	`-o`, `--output`
`cookie`	string	No	-	HTTP cookie for authenticated scanning	`--cookie`
`user-agent`	string	No	-	Custom User-Agent header	`--user-agent`
`proxy`	string	No	-	HTTP proxy address (e.g. http://127.0.0.1:8080)	`--proxy`
`timeout`	integer	No	30	Request timeout in seconds	`--timeout`
`follow-redirects`	boolean	No	-	Follow HTTP redirects	`--follow-redirects`
`no-check-certificate`	boolean	No	-	Skip SSL certificate validation	`--no-check-certificate`
`help`	boolean	No	-	Show this help message	`--help`
`version`	boolean	No	-	Show version information	`--version`

Artifacts

Type	Description	MIME	Schema	Trust
`report.json`	Scan results as JSON	application/json	-	verified
`report.html`	HTML-formatted scan report	text/html	-	verified

Contract

Inputs

web.target.url

Target Joomla URL to scan

web.target.cookie

Session cookie for authenticated scanning

network.proxy

HTTP proxy for routing traffic

Outputs

report.json

Joomscan scan report as JSON

report.html

Joomscan scan report as HTML

Side effects: network_trafficnetwork_traffic

Workflow Edges

Produces

report.jsonreport.html

Consumes

web.target.urlweb.target.cookienetwork.proxy

Resource Profile

Resource	Value
CPU	low
Memory	128 MB
Network	medium
Disk I/O	low

Examples

Basic Joomla scan

joomscan -u http://target.com/joomla

Scan with authenticated cookie

joomscan -u http://target.com/joomla --cookie "session=abc123"

Scan using proxy with verbose output

joomscan -u http://target.com/joomla --proxy http://127.0.0.1:8080 -v

Save scan report to file

joomscan -u http://target.com/joomla -o report.html

Multi-threaded scan

joomscan -u http://target.com/joomla -t 20

Documentation

Joomscan — Joomla CMS Vulnerability Scanner

Joomscan is a specialized vulnerability scanner for Joomla CMS that detects the core version, installed components, known vulnerabilities, and security misconfigurations.

Basic Usage

# Basic scan
joomscan -u http://target.com/joomla

# Scan with proxy through Burp Suite
joomscan -u http://target.com/joomla --proxy http://127.0.0.1:8080

# Authenticated scan
joomscan -u http://target.com/joomla --cookie "session=abc123"

# Save HTML report
joomscan -u http://target.com/joomla -o report.html